Design/Logic Flaw

2020-03-1317:15:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.3%

JSON

Zoho ManageEngine Applications Manager before 14600 allows a remote unauthenticated attacker to disclose license related information via WieldFeedServlet servlet.

CPENameOperatorVersion
manageengine_applications_managereq14.5 build14580
manageengine_applications_managereq14.5 build14570
manageengine_applications_managereq14.5 build14560
manageengine_applications_managereq14.5 build14540
manageengine_applications_managereq14.5 build14530
manageengine_applications_managereq14.5 build14520
manageengine_applications_managereq14.5 build14510
manageengine_applications_managereq14.5 build14500
manageengine_applications_managerlt14.5
manageengine_applications_managereq14.5

Name	Operator	Version
manageengine_applications_manager	eq	14.5 build14580
manageengine_applications_manager	eq	14.5 build14570
manageengine_applications_manager	eq	14.5 build14560
manageengine_applications_manager	eq	14.5 build14540
manageengine_applications_manager	eq	14.5 build14530
manageengine_applications_manager	eq	14.5 build14520
manageengine_applications_manager	eq	14.5 build14510
manageengine_applications_manager	eq	14.5 build14500
manageengine_applications_manager	lt	14.5
manageengine_applications_manager	eq	14.5